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DIGITAL RIGHTS MANAGEMENT SYSTEM 

This application is a continuation-in-part of US. Patent Application 
S.N. 09/034,720, filed March 4, 1998, entit.ed Secure Content Distribution 
5 System. 
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The present invention relates to electronic books and more particularly 
relates to methods for distributing digital rights, and in particular rights for 
encrypted text which can be converted to human readable form, or other data. 

BACKGRQI ihin pp THE IMVFMTir>K f 

Quite possibly the most significant invention in the history of man is the 
development of the printing press. Generally attributed to Gutenberg the 
pr.nt.ng press revolutionized the manner in which the printed word was 
d,stnbuted. Since then, the printed word has enabled virtually the entire world 
to share information. 

Out of the invention of the printing press has grown the entire publishing 
.ndustry, which affects - either directly or indirectly - nearly every person in 
the .ndustrialized world. A significant portion of the publishing industry is 
related to the authoring and publishing of books. These books cover an 
extremelybroad spectrum oftopics, from pure entertainment to highly technical 
reference works. 

Many people regard reading as a fundamental form of entertainment 
and a common thread among educated people is a love of books In nearly 
any crowd it can be expected that a significant percentage will have one or 
more books at hand at any one time. Many vacationers and other travelers can 
be seen carrying an assortment of books or other printed works, and a similar 
number of business travelers can be found to have a book tucked away for 
their spare moments. 
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However, one limitation of conventional books is that they are bulky and 
heavy. Although paperback books have simplified the bulkiness issue, 
they do so at the expense of readability. Hardcover books, while more 
readable, are heavier, bulkier and more costly. Either form represents a 
tremendous use of natural resources, as both require substantial amounts of 
paper and are seldom recycled when thrown away. While many books are 
resold once read, the vast percentage of used books are either thrown away 
or sit, unused, on the owner's shelves. 

From the point of view of the author and the publisher, the used book 
market also represents a loss of potential revenue. If such used books were 
not available, at least some of those purchasing on the secondary market 
would purchase the book new. Because publishers and authors have no 
possibility to generate revenue from such used book sales, publishers have 
tended to increase their book prices to compensate for the lack of downstream 
revenue. 

Another difficulty with conventional books is the cost of distribution. An 
entire segment of the transportation industry is directed to book distribution, 
and the process of selling a simple book typically involves multiple middlemen. 
Naturally, the costs associated with such distribution are passed along to the 
consumer and add significantly to the purchase price of a book. 

Yet another limitation of the existing book publishing industry is that the 
costs associated with printing and distributing a book limits the variety of books 
offered to the public. Book publishers, who must shoulder such costs at least 
initially, often are necessarily loathe to take chances on new authors since they 
have an obligation to their shareholders to generate a profit. As a result, many 
new authors fail to achieve public awareness of their work, and the public 
never has the chance to judge for itself the work of such authors. 

SUMMARY OF THE INIVFMTinM 

The present invention overcomes many of the limitations of the prior art 
and, more particularly, provides a secure system for distributing valuable 
content to authorized recipients. In many embodiments, the content will be 
copyrighted and will be encrypted for protection against unauthorized copying. 



SUBSTITUTE SHEET (RULE 26) 



WO 99/45491 



PCT/US99/047S9 



Still further, the distribution system may include a standalone reading device 
displaying the distributed content as clear text or other suitable format. The 
present invention may thus be thought of as a system and method for digital 
rights management. 

In an exemplary embodiment, the distribution system is configured to 
distribute content such as the text of novels or other books. This content is 
typically protected by copyright and the electronic file of the content is carefully 
protected by the publisher or other copyright holder. The electronic files of the 
content typically reside on a server maintained by the publisher, and are 
distributed only after careful precautions (such as encryption) have been taken 
to ensure maintenance of the proprietary aspects of such files. In general 
publishers are extremely reluctant to permit any other entity to maintain 
custody of such content in a non-encrypted format and generally decline to 
either license or otherwise relinquish control over such content. 

To ensure protection of the publisher's rights, the distribution system of 
the present invention incorporates the publisher's server on which the content 
is stored. In addition, the hardware included with the distribution system may 
include a reader, a user's personal computer, a retailer's server, and an 
authentication server. The reader is typically a standalone device capable of 
storing and selectively displaying the text of a quantity of books, such that the 
user need carry only a single reader to be able the read a large volume of 
books. The reader typically includes decryption logic for displaying as clear 
text the encrypted files received from the publisher. Further, the reader is 
typically connected to a user's PC during downloading of the content from the 
PC. The, user typically requests a book through software resident on the PC; 
for example, a browser with a secure socket layer, or in some cases a Java 
applet, operating on the user's PC will permit the user to send a purchase 
request to a retailer. In a typical embodiment, the request will be encrypted. 
In at least a number of embodiments of the system, the reader itself will be 
identified by an electronic ID, and the electronic ID of the reader will be 
provided to the retailer as discussed hereinafter. 

The user's PC is typically connected, at least intermittently, to a retailer 
(for example, Amazon.com) who maintains a server suitable for executing 
commercial transactions. The connection between the user's PC and the 
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retailer's server may be, for example, over the Internet, and in such a context 
the commercial transaction will typically be a secure credit card or other 
electronic funds transaction. In at least some implementations, the retailer 
server may be incorporated into another of the servers included in the 
distribution system. The retailer server serves as an intermediary to the 
appropriate publisher server and/or the authentication server, and passes the 
order information along to the upstream portions of the distribution system 
once the commercial transaction has been completed. 

The authentication server referred to above as part of the distribution 
system provides a plurality of functions. First, it maintains a database of the 
electronic IDs, or keys, of the various readers. Second, it authenticates 
requests from those readers; third, it keeps track of purchases and accounting 
information for each of the readers; and, fourth, it maintains a per country 
database of the publisher of each book. The authentication server typically 
passes to the appropriate publisher server (e.g., the publisher server for the 
applicable publisher for a specified country) a confirmed request for the file 
which represents the electronic version of the book requested by the user. 
Once the request is acknowledged by the publisher server, the publisher 
server then downloads to the user's PC the electronic file in encrypted form. 
The encryption is typically customized for the electronic ID of the particular 
reader, so that the encrypted file can only be displayed as clear text on the 
requesting reader. In addition, in a currently preferred embodiment, the user's 
PC is not capable of decrypting the file, so that no clear text version of the 
book exists anywhere but the publisher's server. In some embodiments, the 
PC may be eliminated entirely by providing the reader with the ability to access 
the Internet and browser software. Alternatively, the PC may be provided with 
limited decryption capability. 

It will be appreciated that, although a single publisher server is 
discussed herein as part of the exemplary embodiment, in fact multiple such 
servers may be used - including one or more servers at each of several 
publishers. 

Many additional features can also be implemented in the distribution 
system. For example, the authentication server can maintain a list of all titles 
bought by a particular reader. In the event a particular reader is either 
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damaged or lost, or the customer simply desires remote access while away 
from his usual PC, the owner of that reader can request replacement copies of 
the books downloaded to that reader. The authentication server can also 
prov,de a clearinghouse for all reader transactions, including assisting the user 
in making future selections by maintaining a record of the types of books 
preferred by that user. 

These foregoing summary of the present, invention may be better 
appreciated from the following Detailed Description of the Invention taken 
together with the attached Figures. 

FIGURES 

Figure 1 shows an exemplary implementation of a distribution system 
in accordance with the present invention. 

Figure 2A shows in flow diagram form an exemplary implementation of 
a transaction. 

Figure 2B shows in block diagram form an alternative and presently 
preferred implementation of a transaction. 

Figure 3 shows in flow diagram form an exemplary title verification 
- process. Figure 4 shows in perspective view a reader according to the 
present invention. 

Figure 5 shows in block diagram form an exemplary implementation of 
a reader in accordance with the present invention. 

Detailed Description nf the Invention 

Referring first to Figure 1 , a distribution system 1 0 in accordance with 
the present invention can be better appreciated. A publisher server 100 
contams thereon one or more files of content 1 05 such as the text of books 
The files 1 05 are typically maintained in cleartext form on the publisher server 
1 00, although in some embodiments the files of content may be maintained in 
encrypted form. In other embodiments the publisher server 100 may include 
an encryption process for securing content files before such files are 
transmitted in the manner described hereinafter. 
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A user PC 1 10, typically configured with Internet access and suitable 
front-end software 1 12 such as a Web browser (for example, Netscape™ or 
Microsoft Explorer™, communicates with a text reader 1 15 as well as a retailer 
server 120. The reader 115 may be of the type described in connection with 
Figure 4 hereof. As described in greater detail hereinafter, the reader 115 is 
typically identified by a unique indicia such as a serial number 1 17 and in a 
typical embodiment also includes a private encryption key 1 19 which may be 
uniquely associated with either a specific reader or a specific customer. In 
addition to the browser 1 12, the user PC typically has installed application 
software such as a Java applet or a helper application 125 which cooperates 
with a browser by querying the reader 1 15 to extract the reader serial number 
or other customer ID 1 1 7. The PC 1 1 0 may be rendered unnecessary in some 
embodiments by including in the reader 1 1 5 browser software and the ability 
to access the Internet. 

The customer then browses a retailer's server 120 (for example, 
Amazon:com) and identifies selected books that the user wishes to purchase 
in electronic form. Once the customer begins the purchase transaction for the 
identified books (which typically includes providing ISBN numbers or other 
sufficient information to uniquely identify the book), the applet or helper 
application 125 provides the customer or reader specific indicia 117 to the 
retailer's server. Alternatively, this information can be entered manually, or 
could be stored as a cookie or on the server 120. Still further, the helper 
application 125 could be implemented as a plug-in, although plug-ins tend to 
be browser-specific and more complicated as a result. Regardless of the 
specific implementation, the retailer's server 120 is supplied with customer- 
specific indicia which permits subsequent authentication of the purchase and 
verification of the purchaser. In some, though not all, the IP address of the 
user's PC may also be provided to the retailer server as part of the transaction 
In addition, the user supplies appropriate payment information which may be, 
for example, a credit card number or other Internet-capable payment scheme 
The retailer server 120, which may be any form of Internet-connected 
server, responds to a purchase request from a user by executing payment with 
an associated financial institution 130 such as a bank or other credit clearing 
house. In addition, the ID of the reader and the indicia of the requested 
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publication (e.g., ISBN number) is supplied to an authentication server 135. 
In a presently preferred embodiment, the authentication server 135 provides 
several key functions including maintenance of a database of the electronic 
IDs, or keys, of the various readers. Also, the server 1 35 maintains a database 
5 identifying the publisher for a given ISBN number, including country in which 
the customer's reader is located. In addition, the authentication server 135 
authenticates requests from those readers by ensuring that the ID received as 
part of a particular transaction matches the user maintained in the database. 
Further, the authentication server maintains a database of all purchases and 

10 related accounting information for each of the readers. One advantage of such 
an arrangement is that, if a reader 1 15 fails or the content stored therein is 
erased, the database maintained by the server 1 35 can automatically arrange 
for replacement of the downloaded text in a manner described hereinafter. In 
addition, in at least some embodiments, the authentication server will execute 

15 a financial transaction with a bank 140 or other clearing house. The 
authentication server 135 typically passes to the publisher server 100 a 
confirmed request for a file 1 05 which represents the electronic version of the 
book requested by the user. 

At this point the transaction is complete but for supplying the electronic 

20 file to the customer's reader. In some instances, the customer may not wish 
to immediately download the file; in others, the customer may want an 
immediate download. If no download is requested, the process essentially 
terminates until a download is requested. Once a download is requested — 
which may come hours, days, weeks or more later — the request is 

25 acknowledged by the publisher server 1 00. At that point, the publisher server 
downloads the encrypted file 1 05 to the user's PC 110, via the plug-in or helper 
application 125; a web browser may also be used in at least some 
embodiments. The encryption is typically customized for the electronic ID of 
the particular reader 115, typically using the key or !Q uniquely associated with 

30 that reader, so that the encrypted file can only be 'displayed, as- clear text on the 
requesting reader 115. In addition, in a currently preferred embodiment, the 
user's PC is not capable of decrypting the file, so that no clear text version of 
the book exists anywhere but the publisher's server. In this manner, copyright 
violations are avoided and the rights of the publisher are protected. In some 
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instances, such as for works in the public domain, it may be desirable not to 
I5T ' n ~ ,hS -^on/Ceoyption steps are si mp, y 

With the aid of the helper application 125, the user's PC stores the 
encoded file 105 un,i, the associated reader 115 estaoth" a 
commun,ca«ons link through any suitable protocol, including serial, parallel 
USB, twsted pa,r, or infrared. The file is then downloaded to the reader 1 15 
where^ppropriate decryption occurs and permits the file to be displayed as 

In an important feature, the distribution scheme of the present invention 

inT ,hat COn,en, rSPreSen,ed * ,he 105 belicen r d ri^ 

rr n eed * " ' hat ^ n6i,her re ' ai,er "° r < he -^ntica^ 
server need have any contro. over or custody of the content, which passes 

so,e.y between the pubiisher server 100 and the user PC 110. In a preLnHy 
Purred ernbodiment, me file 105 is maintained in en^ypted form.aZugh 
f^h , ^ bS ** a " fi ' eS 10S - nevertheless, for those 

des ZT"^ C ° PieS n °' ^ S ° me e ~en,s, i, may also be 

b^n T ° C h 9Ure rMder 1 1 5 10 deayP ' ** a * a °° <* gently 
be,ng delayed, so that me remaining, ex, is maintained in fuUy encrypted form 
even within the reader 115. "yM««uiorm 

Referring next ,o Figure 2A and 2B, the events associated with a single 
^nsachon may be appreciated in greater detail. Referring firs, to Figure L 
and beg,nn,ng a, step 200. the user connects ,o a retail Web site such as 
amazon.com. which allows the user to peruse the variety of books available for 

ZEZL ^ T 86,60,8 one or more ,i,,es at step 202 - and * ^ 

Ll b r * " 86 reqUeS '' ,yPiCa " y ° Ver ***** section bu, any 
su table communions link is acceptable. The purchase request of step 204 
•s typically a unique iden,*ier such as an ISBN number, as noted previous^ 

^Tr" ' " ?, ° mer *""* idenHflCa,i0n - and 

payment authorization. 

„, , * St6p 206 ,he retai,er -v* authorization to charge the 

customer account for me amount of the retail purchase, Which directs me 
browser 112 ,o attach ,o the appropriate server for an Inte^ased 
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transaction, and otherwise processes the billing information associated with 
the purchase. At step 208 retailer server sends a fulfillment request to the 
authent,cation server. In response, at step 210 the authentication server 
obtains the user's reader ID from the retailer server as part of the fulfillment 
5 request although the other alternatives discussed previously are also 
acceptable. In at least some embodiments, the reader ID is encrypted and 
hashed. In others, the reader ID may be looked up in a database, for example 
a database including customer information. At step 212 the authentication 
server checks the hash and decrypts the ID, after which the ID is compared to 
10 the reader ID database maintained on the authentication server 

Assuming the ID and related data are confirmed by the authentication 
server, at step 214 the server updates its database to identify the new 
purchase in the database for the associated reader. At step 216 the 
authentication server sends back to the retailer server a fulfillment 
15 confirmation, which causes the retailer server to complete the capture of 
payment from the user's credit card or other account at step 218 In some 
embodiments, such as the alternative embodiment discussed hereinafter in 
connection with Figure 2B, the message from the authentication server may 
.nclude a URL or other pointer to a web or network location from which the 
20 customer may download the titles or other data. In addition, such other 
embodiments may include "pre-purchase" and "commit purchase" steps to 
facilitate various database operations. 

Continuing with reference to Figure 2A, at step 220 the authentication 
server debits the retailer account (now enriched by the retail amount of the 
book) for the wholesale price of the book or other content, and credits the 
publisher's account by an appropriate amount Typically, the publisher's 
account is credited for less than the total wholesale price of the book such that 
a difference exists. That difference is then credited to the account of the 
operator of the authentication server. 

As noted previously, the user has the option to request a download of 
his new purchases or any previous purchases. A feature of the present 
.nvention is that any titles owned by a customer can be downloaded at any 
time. At step 221, the process checks to determine whether the user has 
requested a download. 
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. h„i,H Wh8n a " Ser reqUeS ' S 3 d0Wnl0ad ' ,he ^"tication server generates 
a bu Id request a. step 222. identifying the fiie(s) requested and the readers 
public key. In other embodiments, i, may be preferred to permit me ustt 
d^nload me data from a pubiisher. ,n such an embodiment, me puoC 

for the particular reader. The authentication server then confirms owners^ 
of the tmes and transfers to the publisher server the reader^"^* 
ecuntvfield may also be included, and may comprise an encypt^l ^ 
book, the customer identified the reader .0. .n an exempt embod™, 
) the secunty field is bound into the enoypted fi.e and is used in TheTea^m 

IT ! m h b0< " men,S ' au,horiza «°"> - to the appropriate pub^r 
se^er.^h,ch ,n turn (step 226) encrypts the requested fiie Jth the readers 
pub.,c ey or B. and fo^rds the now.nayp.ed file to the use^cTstep 
228. The P'"3-'no'-helpera P p125ontheuser'sPCthencau.esH la fi,r,rr 
loaded in the user's hard drive in encrypted form a, s'ep 2^0 * 
Finally, at step 232 the user connects the reader 115 to the PC whir* 
permits me title ,o be downloaded to the reader. The rea'er ™ 7£ 
rece, P , process, deoypts .he hash and session key checks the ha J * « 

tra „«« n a " ema ' iVe ' and P resen «)' Preferred/ implementation of the 
transaction process is shown in Fiaure 2B Th= „,„ . 

respects to me transaction P^T^'S^TT ^ 
authen^, , n server, which caused 

step 252 with a unique transaction ID which is sen. to me reta, J "3 The 
.re« a ,,erserv e rmenca P «ure S abuye,scredi,cardinfon.a.,ona,r p ^,^ 



10 



SUBSTITUTE SHEET (RULE 26) 



WO 99/45491 



PCT/US99/04759 



at step 256 the retailer server sends a "commit" message with the unique 
transaction ID received from the authentication server in step 252. 

The process then continues at step 214, as discussed above in 
connection with Figure 2A, where the authentication server updates the 
database for the user's reader with the new purchase. The authentication 
server then sends a fulfillment confirmation to the retailer server at step 216, 
and the retailer server captures payment at step 21 8. 

Thereafter, at step 258, the retailer server sends to the user a "pickup" 
location, such as a URL, from which the user can download the newly- 
purchased text or other data. The authentication server then debits the retailer 
account for the wholesale price of the book or other data, and credits the 
publisher's account for the appropriate amount. Unlike the process shown in 
Figure 2A, the process of Figure 2B then completes a first phase at step 260 
until the user decides to download the purchased title or titles. 

Once the user determines to download the title or titles purchased 
through the foregoing process, the second phase process of Figure 2B 
initiates, and at step 262 the user begins the download process by selecting 
the URL or other location provided in the message sent at step 258. The 
process then continues in a matter substantially identical to that shown in 
Figure 2A, with the publisher server requesting the encryption key for the user 
ID at step 222, the authentication server returning the encryption key and 
verifying customer ownership at step 224. At step 226 the publisher server 
encrypts the requested file with the reader's public key, while at step 228 the 
publisher server transmits the title in encrypted form to the user's PC. The 
plug-in, or helper application on the user's PC then stores the new title on the 
PC, which permits the user, at step 232, to receive the title or other data, 
decrypt it, and read the title. The second phase of the process then advances 
to step 268 where it returns to the retailer server, and then completes at step 
270. ■ 

Referring next to Figure 3, the process by which the hash and security 
field information is generated and verified can be better understood, the title 
verification process shown in Figure 3 begins at step 300 by a hashing 
calculation, which may for example use a SHA-1 algorithm, to calculate a hash 
for a title file downloaded from the publisher's server. At step 305, the SHA-1 
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d, s l" H t " " d8CryP,ed u *« me Cl ~ P^a.e Key 

d.scussed above. At step 310, the caicuiated hash from step 300 is 

T d90yP ' ed haSh 96nera,ed 38 305 - do no" 

match, the title verification fails at step 315. nl " 

5 However, if the compare is successful and the two hashes match the 

process advances to step 320 and the TiHe Certificate is then verifletin a 
manner ilartotnetit|efile ^ 

hash is calculate, .for the Title CertKicate provided as part oL 

SHA-1 hash for the Title Certificate is then decrypted at step 325 usino ,h! 

10 public Key of the auction sewer, for eZ-e Jpll k e y o^ Z 
assignee of me present invention. The caiculated and decrypted hashes for 
theTLIeCertificateare^encomparedatstepaao, andamislch^uses t h e 
process to terminate a. step 335. A mismatch would typically reliu, ^ 
request for a transaction did not originate from an authorized pari sTas 2 

15 operator of the authentication server. ysucnastne 

If the calculated and decn/Dted ha«h 
* yfJiefU nasn match, the process advance© fn 

step 340 where me title number is compared to the rL Cen^eTthe 
compare fails , „ ^ ^ Tj(|e ^ Mho 

20 su Ieds n Te 8r pro n c d ^ * ermina,eS - ^ ^ " - ~™ - 
Il^Tf P COn " nUeS * Step 350 * °«™»"9 'he CRL or 

Z ^Z'TTTJ™ ™ e Cef,i,iCa,e ° f 816 d ~dTe ; 

aTainsft'nl ? ' " ^ '° e " mina,e - checked 

against the customer certificate maintained in the reader 115 if not tZ 

process terminates a, step 3S0. This early termination usually results where 
25 «ie customer has moved me certificate improperly, or the 

has been revoked for other reasons. * the customer certificate is vaW 
however, the titie is fully verified and the process advances to step 365 b y 
permrtting me file to be decrypted as needed for dispiay to the custom " 

30 b B T 9 ^ '° ^ 4 - iUe reader 115 °" he P res ^t invention may 

30 bebetterunderstood. ThereaderHSistypicaHy.compaCnandheidde^ 
having a screen 400 surrounded by a bezel 405. A series « indentmi ^™ 

400 a^a' "7 bS COnVenien " y ' OCated ar ° Und the - 

bel T . T USer - aCtUable bu «<™ «0 may be iocated either in the 

bezel orastouch-sensiflve portions of.hescreen400. TheindenUtionsperLu 
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a user to readily identify a "home position" of the reader in any orientation and 
the buttons permit data to be displayed in either a landscape or portrait mode 
in larger or smaller size, or other features including attaching notes or 
highlighting of displayed text. Buttons may also be provided for other 
functions, including management of personal information, a calculator or 
Internet access. The reader 115 includes logic described in greater detail in 
connection with Figure 5, which logic is typically included on a single logic 
board (not shown) enclosed within a case 415. The reader typically sits in a 
base unit or cradle 420 which can provide data interface, power and charging 
functions as well as providing a convenient reading support for the reader 1 1 5 
Next referring to Figure 5, the schematic block diagram of the reader 
115 may be better appreciated. The reader comprises a CPU 500 and may for 
example be a Sharp LH77790 device, which includes an ARM-7 CPU core as 
well as 2K cache, 2K general purpose RAM, three UARTs, an LCD panel 
controller, three counter-timers, three PWMs, an interrupt controller, a memory 
controller for external DRAM and or other memory such as SRAM or PROMs 
and a 24-bit parallel port. A clock crystal 505 provides a clock signal of a 
su.table frequency, for example on the order of 16.5888 MHz. Input to the 
reader 115 can be provided through an IrDA transceiver 51 0, a serial port 515 
connected through a base unit 520 and an RS232 transceiver 525 a touch 
screen 530 and buttons 41 0 including "NextPage" button 535. Analytical input 
and output may be had through debug connector 540, which connects to one 
of the UARTs in the CPU 500. The touchscreen 530 will typically interface to 
the CPU 500 through a touchscreen interface 545. 

A variety of devices may be connected to the parallel port of the CPU 
500, including a real-time clock 550, FLASH RAM 555, and an option 
connects 560 (which may also connect to an Interrupt Request line INT4 of 
the CPU 500. Likewise, a variety of devices may be connected to the system 
bus 565 of the CPU 500, including EPROM-570, DRAM 575, A-Bus Control 
Port 580 and Option Connector 560. The System bus 565 may also provide 
output to a Misc. Control Port 585, which in turn provides data to the 
touchscreen interface 545 and power supply/voltage sensor block 590 Output 
from the CPU, including text display of the files or books, can be displayed on 
LCD panel 600, which may cooperate with a backlight 605. Conventional 
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controls and power supplies such as power button 610, battery 615 and wall 
cube transformer 620 may also be provided. 

Having fully described a preferred embodiment of the invention and 

here n, that numerous alternatives and equivalents exist which do not fepart 
from the .nvent.on. ,t is therefore intended that the invention not be limitd by 
the forego.ng description, but only by the appended claims 
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We claim: 

1 . A distribution system for delivery of secure content from a repository of 
such secure content to a user comprising 

a user system for communicating a request to receive secure content as 
specified by a user, 

an authorization server responsive to requests from a user system for 
authenticating requests for secure content from a user system, 

a first server having stored thereon at least one file of secure content 
and responsive to an authorized request for delivery of such file, 

a communications link from the first server to a user system for 
delivering secure content. 

2. The distribution system of claim 1 wherein the user system includes 

a reader for displaying the secure content as clear text, 

a user host system for receiving secure content from the first server but 

incapable of displaying the secure content as clear text, and 

a communications link for delivering secure content stored in the user 

host system to the reader. 

3. A method for delivering secure content from a repository system to a user 
system including the steps of 

generating, at a user system, a request for secure content, 
receiving the request and generating an authorization signal in response 
thereto, 

delivering the request for secure content to a repository system on 
which the requested secure content is stored, 

delivering to the user system the secure content. 

4. The method of claim 3 further including the step of displaying the content for 
viewing by a user. 
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However one limitation of conventional books is that ,hey are bulky and 

they do Ta, 2 !° U9h ""*• ^ SimP,med ,he bu ' ki "^ " 

they do so at the expense of readability. Hardcover books while more 

eadabte, are heavier, bulkier and more costly. Either form ClZl 

^ rSCy Sd * hrOWn ^ White books are 

resold once read, the vast percentage of used books are either tnro^IT 
or sit, unused, on the owner's shelves. ^ 
From the point of view of the author and the publisher the used book 
0 m arke,a.sorepresen te a,ossofpo,en,ia,reven U e. K such used boTksv^ 
no, avertable, at leas, some of those purchase on the secondare! 
would purchase me book new. Because publishers and authors have^o 
poss,b,l,ty to generate revenue from such used book sales wSLTT 

«r» An ° ther difRCU " y "* COnven,ional •»«*• ^ the cost of distribution An 
enhre segment of the transportation industry is directed ,o book dis J bl^ 
an process ofseHing a simple bock typically involves multiple m Z elen 
Naturally, the costs associated with such disWbuUon are passed alongTme 
consumer and add significantly to the purchase price of a book 

Yet another limitation of the existing book publishing industry is that the 

Z eZr'T" PrinHn9 ^ diS,ribU,in9 3 b °° k " mi,s «4S 
offered to the pub„c. Book publishers, who must shoulder such cos* a. least 

have an ob.,ga,,on ,o their shareholders to generate a profit As a resuTnl" 

zjzt* ,o a r ieve pubiic * ^ -:r pX 

never has the chance to judge for itself the work of such authors. 

SUMMARY op JHF |f jy F M-p^ N . 

and ^ T* inVenti ° n ° vercomes "*V °' 'he limitations of the prior art 

Itent to T PrOVi<feS 3 — for vZo£ 

content to authorized recipients, m many embodiments, ,he content wil^ 

copyngh,edandw^,,beencryp,edforpro,ec,ionagains,unau,horizedcoryn? 
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DIGITAL RIGHTS MANAGEMENT SYSTEM 



* m J hiS app,iC3tion is a continuation-in-part of U.S. Patent Application 
09/034,720, filed March 4, 1998, entit.ed Secure Content DisLuZ 
oystem. 

FIELD OF T HE INVENTION! 

The present invention relates to electronic books and more particularly 
relates to methods for distributing digital rights, and in particular rights for 
encrypted text which can be converted to human readable form, or other data. 

BACKGROU ND OF THE INVENTION! 

Quite possibly the most significant invention in the history of man is the 
development of the printing press. Generally attributed to Gutenberg the 
pnnt.ng press revolutionized the manner in which the printed word was 
d.stnbuted. Since then, the printed word has enabled virtually the entire world 
to share information. 

ind.,« ° U ^ f T r enti ° n ° f Prin ' ing PreSS haS 9rown ,he «n«re publishing 
ndusby, wh,ch affects - either directly or indirectly _ neany every person in 

the .ndustrialized world. A significant portion of the publishing industry- is 
related to the authoring and publishing of books. These books cover an 
ertremely broad spectrum of topics, from pure entertainment to highly technical 
reference works. 

Many people regard reading as a fundamental form of entertainment 
and a common thread among educated people is a love of books In nearly 
any crowd it can be expected that a significant percentage will have one or 
morebooksathandata^ 

be seen carrying an assortment of books or other printed works, and a similar 
number of business travelers can be found to have a book tucked away for 
their spare moments. 
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retailer's server may be, for example, over the Internet, and in such a context 
the commercial transaction will typically be a secure credit card or other " 
electronic funds transaction. In at least some implementations, the retailer 
server may be incorporated into another of the servers included in the 
distnbution system. The retailer server serves as an Intermediary to the 
appropriate publisher server and/or the authentication server, and passes the 
order information along to the upstream portions of the distribution system 
once the commercial transaction has been completed. 

The authentication server referred to above as part of the distribution 
system provides a plurality of functions. First, it maintains a database of the 
electronic IDs or keys, o, the various readers. Second, it auttenticates 
requests from those readers; third, it keeps track of purchases and accounting 
information for each of the readers; and, fourth, it maintains a per country 
database of the publisher of each book. The authentication server typical* 
passes to the appropriate publisher server (e.g.. the publisher server for the 
applicable publisher for a specified country) a confirmed request for the file 
which represents the electronic version of the book requested by the user 
Once the request is acknowledged by the publisher server, the publisher 
server then downloads to the user's PC the electronic file in enaypted form 
The encryption is typically customized for the electronic ID of me particular 
reader, so that the enaypted file can only be displayed as clear text on the 
requesting reader. In addition, in a currently preferred embodiment, the user's 
PC is not capable of decrypting the file, so that no clear text version of the 
book exists anywhere but the publisher's server. In some embodiments, the 
PC may be eliminated entirely by providing the readerwith the ability to access 
he nternet and browser software. AHernatively, the PC may be provided with 
limited decryption capability. . 
^ It will be appreciated that/although a single publisher server is 
discussed herein as part of the exemplary embodiment, in fact multiple such 
servers may be Used - including one or more servers at each of several 
publishers. dl 

Many additional features can also be implemented in the distribution 
system. For example, the authentication server can maintain a list of all titles 
bought by a particular reader. In the event a particular reader is either 
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Still further, the distribution system may include a standalone reading device 
displaying the distributed content as clear text or other suitable format. The 
present invention may thus be thought of as a system and method for digital 
rights management. 

In an exemplary embodiment, the distribution system is configured to 
distribute content such as the text of novels or other books. This content is 
typically protected by copyright and the electronicfile of the content is carefully 
protected by the publisher or other copyright holder. The electronic files of the 
content typically reside on a server maintained by the publisher, and are 
distributed only after careful precautions (such as encryption) have been taken 
to ensure maintenance of the proprietary aspects of such files. In general, 
publishers are extremely reluctant to permit any other entity to maintain 
custody of such content in a non-encrypted format and generally decline to 
either license or otherwise relinquish control over such content. 

To ensure protection of the publisher's rights, the distribution system of 
the present invention incorporates the publisher's server on. which the content 
is stored. In addition, the hardware included with the distribution system may 
include a reader, a user's personal computer, a retailer's server, and an 
authentication server. The reader is typically a standalone device capable of 
storing and selectively displaying the text of a quantity of books, such that the 
user need carry only a single reader to be able the read a large volume of 
books.. The reader typically includes decryption logic for displaying as clear 
text the encrypted files received from the publisher. Further, the reader is 
typically connected to a user's PC during downloading of the content from the 
PC. The user typically requests a book through software resident on the PC; 
for example, a browser with a secure socket layer, or in some cases a Java 
applet, operating on the user's PC will permit the user to send a purchase 
request to a retailer. In a typical embodiment, the request will be encrypted. 
In at least a number of embodiments of the system, the reader itself will be 
identified by an electronic ! s D, and the electronic ID of the reader will be 
provided to the retailer as discussed hereinafter. 

The user's PC is typically connected, at least intermittently, to a retailer 
(for example, Amazon.com) who maintains a server suitable for executing 
commercial transactions. , The connection between the user's PC and the 
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A user PC 1 1 0, typically configured with Internet access and suitable 
front-end software 1 12 such as a Web browser (for example, Netscape™ or 
Microsoft Explorer™, communicates with a text reader 1 1 5 as well as a retailer 
server 120. The reader 1 1 5 may be of the type described in connection with 
Figure 4 hereof. As described in greater detail hereinafter, the reader 1 15 is 
typically identified by a unique indicia such as a serial number 117 and in a 
typical embodiment also includes a private encryption key 119 which may be 
uniquely associated with either a specific reader or a specific customer In 
addition to the browser 112, the user PC typically has installed application 
software such as a Java applet or a helper application 125 which cooperates 
with a browser by querying the reader 1 1 5 to extract the reader serial number 
orothercustomerlD117. The PC 110 may be rendered unnecessary in some 
embodiments by including in the reader 115 browser software and the ability 
to access the Internet. 

The customer then browses a retailer's server 120 (for example, 
Amazon.com) and identifies selected books that the user wishes to purchase 
in electronic form. Once the customer begins the purchase transaction for the 
identified books (which typically includes providing ISBN numbers or other 
sufficient information to uniquely identify the book), the applet or helper 
application 125 provides the customer or reader specific indicia 117 to the 
retailer's server. Alternatively, this information can be entered manually, or 
could be stored as a cookie or on the server 120. Still further, . the.helper 
application 125 could be implemented as a plug-in, although plug-ins tend to 
be browser-specific and more complicated as a result Regardless of the 
specific implementation, the retailer's server 120 is supplied with customer- 
specific indicia which permits subsequent authentication of the purchase and 
verification of the purchaser. In some, though not all, the IP address of the 
user's PC may also be provided to the retailer server as part of the transaction. 
In addition, the user supplies appropriate payment information which may be, 
for example, a credit card number or other Internet-capable payment scheme. 

The retailer server 120, which may be any form of Internet-connected 
server, responds to a purchase request from a user by executing payment with 
an associated financial institution 130 such as a bank or other credit clearing 
house. In addition, the ID of the reader and the indicia of the requested 
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damaged or lost, or the customer simply desires remote access while away 
from his usual PC, the owner of that reader can request replacement copies of 
the books downloaded to that reader. The authentication server can also 
provide a clearinghouse for all reader transactions, including assisting the user 
in making future selections by maintaining a record of the types of books 
preferred by that user. 

These foregoing summary of the present invention may be better 
appreciated from the following Detailed Description of the Invention, taken 
together with the attached Figures. 

FIGURES 

Figure 1 shows an exemplary implementation of a distribution system 
in accordance with the present invention. 

Figure 2A shows in flow diagram form an exemplary implementation of 
a transaction. 

Figure 2B shows in block diagram form an alternative and presently 
preferred implementation of a transaction. 

Figure 3 shows in flow diagram form an exemplary title verification 
process. Figure 4 shows in perspective view a reader according to the 
present invention. 

Figure 5 shows in block diagram form an exemplary implementation of ~ 
a reader in accordance with the present invention. 

Detailed Description of the invention 

Referring first to Figure 1 , a distribution system 1 0 in accordance with 
the present invention can be better appreciated. A publisher server 100 
contains thereon one or more files of content 105 such as the text of books. 
The files 105 are typically maintained in cleartext form on the publisher server 
100, although in some embodiments the files of content may be maintained in 
encrypted form. In other embodiments the publisher server 1 00 may include 
an encryption process for securing content files before such files are 
transmitted in the manner described hereinafter. 
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instances, such as for works in the public domain, i. may be desirable not to 
1™' in «** ~ *° -«VP«on/dec W , i0 n steps are simply 

With the aid of the helper application 125, the user's PC stores the 
• encrypted file 105 unti, the associated reader 1,5 estab shes ^ 
communications link through any suitabie protoco,, including serial, parallel 
USB. twisted P a,r, or mfrared. The file is then downloaded to the reader 1 15 
where appropriate deoyption occurs and permits the file to be displayed as 

In an important feature, the distribution scheme of the present invention 

ZZr; e : T rePr8Sen,ed by me "* 105 b * »~"seX any 

eX"ted ha " ' hat ne " her re,ai ' er 5etVer "° r aumentication 
sender need have any control over or custody of the content, which passes 

solely between the publisher server 100 and the user PC 110. In a preseX 

SZT*"* the fl,e 1 05 is maintained in «S 

such enaypt,on may not be required for all fi.es 105. Nevertheless, for those 

2ZTT Z 1 *" n °' ^ SOme • may alsol 

° C T' 9Ure r8ader 1 15 '° d9CW «* a «• * currently 
be.ngd«p,ayed,so t ha..heremaining,ex.is maintained in fu.ly encrypted fol 
even within the reader 11 5. "ypieaiorm 

. Referring next to Figure 2A and 2B. the events associated with a single 
transaction may be appreciated in greater detail. Referring first to Figure 2V 
and beginning at step 200, the user connects to a retail Web site such as 
D TrZe ro r h '*t^ meUSer,Ope " SemeVariety0fb0otea -»^'efor 
T ° r m ° re ' i,,9S * ste > 2 ° 2 ' — * step 

sul J 3 PUr ^ Se reC,UeS, ' ,yPiCa " y ° Ver 3 " etwork but ar£ 

sutable communications link isacceptab.e. The purchase request of step 2 J 
.styp.ca.ly a unique identifier such as an ISBN number, as noted previous* 

pavmentTr™^ **** -formation and 

payment authorization. 

-- « ^ 1,18 re,aiier S6rV6r S6ekS «■»*"** to charge me 
customer's account for me amount of the retail purchase, which directs the 
browser 112 ,0 attach ,0 the appropriate server for an Internet-bas* 
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publication (e.g., ISBN number) is supplied to an authentication server 135 
In a presently preferred embodiment, the authentication server 1 35 provides " 
several key functions including maintenance of a database of the electronic 
IDs, or keys, of the various readers. Also, the server 135 maintains a database 
identifying the publisher for a given ISBN number, including country in which 
the customer's reader is located. In addition, the authentication server 135 
authenticates requests from those readers by ensuring that the ID received as 
part of a particular transaction matches the user maintained in the database 
Further, the authentication server maintains a database of all purchases and 
related accounting information for each of the readers. One advantage of such 
an arrangement is that, if a reader 115 fails or the content stored therein is 
erased, the database maintained by the server 135 can automatically arrange 
for replacement of the downloaded text in a manner described hereinafter In 
add.t»on, in at least some embodiments, the authentication server will execute 
a financial transaction with a bank 140 or other clearing house The 
authentication server 135 typically passes to the publisher server 100 a 
confirmed request for a file 1 05 which represents the electronic version of the 
book requested by the user. 

At this point the transaction is complete but for supplying the electronic 
file to the customer's reader. In some instances, the customer may not wish f 
to .mmediately download the file; in others, the customer may want an I 
immediate download. If no download is requested, the process essentially I 
terminates until a download is requested. Once a download is requested - ' " f 
which may come hours, days, weeks or more later - the request is 
acknowledged by the publisher server 100. At that point, the publisher server I 
downloads the encrypted file 1 05 to the user's PC 1 10, via the plug-in or helper I 
application 125; a web browser may also be used in at least some I 
embodiments. The encryption is typically customized for the electronic ID of i 
the particular reader 1 15, typically using the key or ID uniquely associated with I 
that reader, so that the encrypted file can only be displayed as clear text on the I 
requesting reader 1 15. In addition, in a currently preferred embodiment the & 
user's PC is not capable of decrypting the file, so that no clear text version of = 
the book exists anywhere but the publisher's server. In this manner copyright 
violations are avoided and the rights of the publisher are protected In some 
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Whenauserrequestsadownload.theaumenticationseo/ergenerales 
a bu„c request a, step 222, identifying the fi,e<s) requested and! re- 
public key. In other embodiments, it may be preferred to n. J Vk 
download thedatafrom a publisher. In Lch ^To J^H ^ 

S serverrespondstosuchauserrequestbyreaueslina* ,\ Publisher 

forme particular reader. The JLi^^^^^^ 
of the titles and transfers to the M^^Z^Z^ 
seo,n* field may also be included, and may comprise an encry^o J the" 
book, the customer identifier and the reader ID lnan a x Sm „,=T a, °™ 0fme 

xcr ; D n Tdf p t ^ 

ioaded in the use,s hard drive in encrypted form « " 
Finally, at step 232 the user connects the reader 1 15 to the PC whi,-h 
permits the title to be downloaded to the reader Th„ lit, 

l e p 2 ^ rr P ' e ' eSa, ' ,eP236 - ,n ^ e -"t a • N o- response re u^d 
-sacl^ 

respects to the ^^^^JT^T* 
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transaction, and otherwise processes the billing information associated with 
the purchase. At step 208 retailer server sends a fulfillment request to the 
authentication server. In response, at step 210 the authentication server 
obtams the user's reader ID from the retailer server as part of the fulfilment 
request although the other alternatives discussed previously are also 
acceptable. In at least some embodiments, the reader ID is encrypted and 
hashed. 'nothers,thereaderlDmaybe.ookedupinadatabase,forexam P »e 
a database including customer information. At step 212 the authentication 
server checks the hash and decrypts the ID, after which the ID is compared to 
the reader ID database maintained on the authentication server 

Assuming the ID and related data are confirmed by the authentication 
server, at step 214 the server updates its database to identify the new 
purchase in the database for the associated reader. At step 216 the 
authentication server sends back to the retailer server a fulfillment 
confirmation, which causes the retailer server to complete the capture of 
payment from the user's credit card or other account at step 218 In some 
embodiments, such as the alternative embodiment discussed hereinafter in 
connection with Figure 2B, the message from the authentication server may 
-nclude a URL or other pointer to a web or network location from which the 
customer may download the titles or other data. In addition, such other 
embodiments may include "pre-purchase» and "commit purchase" steps to 
facilitate various database operations. 

Continuing with reference to Figure 2A, at step 220 the authentication 
server debits the retailer account (now enriched by the retail amount of the 
book) for the wholesale price of the book or other content, and credits the 
publisher's account by an appropriate amount. Typically, the publisher's 
account is credited for less than the total wholesale price of the book such that 
a difference exists. That difference is then credited to the account of the 
operator of the authentication server. 

As noted previously, the user has the option to request a download of 
his new purchases or any previous purchases. A feature of the present 
invention is that any titles owned by a customer can be downloaded at any 
time. At step 221, the process checks to determine whether the user has 
requested a download. 
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hash included in the title is then decrypted using the Customer Private Kev 
discussed above. At step 310. the calculated hash from step 3^ is the^" 

ZTT T ,he J e " yp,ed hash 9enera,ed as Ste " 305 » *° ^ * « 

match, the title verification tails at step 315. 
5 However, if the compare is successful and the two hashes match the 

process advances to step 320 and the Title Certificate is then ve^et'in a 
manner similar to tne tit|e fl|e ^ ^ ^ 

hash is calculated for the Title Certificate provided as part of the Mefi.e ^hl 
SHA-1 hash for the Title Certificate is then decrypt ed at stel ^ 
10 public key of the auction server, for 

assignee of the present invention. The caiOulated and decked hies Z 
•» T„,e Certificate then compared at step 330, and a mismatch 
process to terminate a. step 335. A mismatch wou.d typically retu,! " £ 
request for a transaction did not originate from an aumonze^ par^ si* el h^ 
15 operator of the authentication server. Panysuchasthe 

fite „ J n ,h : CalCUla,ed and de "VP'^ hash match, the process advances to 
step 340 where the title number is compared to the Title Certificate d 

the title number and the process terminates at step 345 u th = 
». succeeds, the process continues a, step 350 Teeing he CR^ 

To^T^, " fr ° m Ti " e CertmCa,e 0f ,he ^"loaded me A 
step 355, the CRL (which is used to eliminate rogue certificates, is checked 
agams, tne customer certificate maintained in the reader „ 5 , noT^ 

5 ZT, T S ^ SteP 360 ' TWS 6ar,y ,erminatfo " -ua.,y results whl 
h ^-f mer ^ ™ved , ha certificate improper or the customer cer,^ 
has been revoked for other reasons. If the customer certificate is vaW 
however, the title is fudy verified and tne process advances to s ep « b y 
permitting the fi,e to be decrypted as needed for dispiay to the cusler 
Referring now to Figure 4 the reader iic rt f*u 

> -etterunderstood. ^^^^^^^ 

in"e ^405 T"** * * *** 405 A ^ ~™ 
in the bezel 405 may be conveniently located around the edge of the screen 

Z* TT " bu «°- ««> m* be local e hert m" 

bezel orastouch-sensitiveportions of ,hescreen400. The indentations pC 
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at step 256 the retailer server sends a -commit- message with me unique 
transaction ID received from the authentication server in step 252 

The process then continues at step 214, as discussed above in 
connection with Figure 2A, where the authentication server updates the 
database for the user's reader with the new purchase The authentication 
server then sends a fulfillment confirmation to the retailer server at step 216 
and the retailer server captures payment at step 218. 

Thereafter, at step 258, the retailer server sends to the user a -pickup- 
locafcon, such as a URL, from which the user can download the newly- 
purchased text or other data. The authentication server then debits the retailer 
account for the wholesale price of the book or omer data, and credits the 
publishers account for the appropriate amount. Unlike the process shown in 

uZL • TT S " Fi9ure 2B ,hen completes a firet « 

unt,l the user decides to download the purchased title or titles 

throuolfr T dB,ermineS '° dOWn '° ad ' he Uae w ,i,,es - 
through the foregoing process, the second phase process of Figure 2B 

the URL or other .ocation provided in the message sent at step 258 ThS 
process then continues in a matter substantially identical to that shown in 

T'T f* PUWiSher ^ re<,UeS,in S «- key for the J* 

ID a, step 222, the authentication server returning the encryption key and 
venfyng customer ownership a, step 224. At step 226 .he publisher server 
•now. the requested file with the reader's public key. while at step 228 the 
publisher server transmits the title in encrypted form to the user's PC The 
plug-in or he!per application on the user's PC then stores the new title on the 
P^vvh-ch permits the user, at step 232, to receive the title or other date, 
Btoypt * and read the title. The second phase of the process then advances 
to step 268 where i, returns to the retailer server, and then completes aTstep 

field inf^T 9 ^ '° F ' 9Ure 3 ' ' he PrOCeSS by Which me hasn and 

field information ,s generated and verified can be better understood. The title 

venfica ,on process shown in Figure 3 begins a. step 300 by a hashing 

calculation, which mayfor example use a SHA-1 algorithm, to calculate a hash 

for a *.,e f„e downloaded from the publisher's server. At step 305 the SHA-1 
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controls and power supplies such as power button 610, battery 615 and wall 
cube transformer 620 may also be provided. 

Having fully described a preferred embodiment of the invention and 
vanous alternatives, those skilled in the artwill recognize, given the teachings 
here.n, that numerous alternatives and equivalents exist which do not depart 
from the invention. It is therefore intended that the invention not be limited by 
the forego.ng description, but only by the appended claims. 
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a user to readily identify a "home position" of the reader in any orientation, and 
the buttons permit data to be displayed in either a landscape or portrait mode, 
in larger or smaller size, or other features including attaching notes or 
highlighting of displayed text. Buttons may also be provided for other 
functions, including management of personal information, a calculator, or 
Internet access. The reader 1 1 5 includes logic described in greater detail in 
connection with Figure 5, which logic is typically included on a single logic 
board (not shown) enclosed within a case 415. The reader typically sits in a 
base unit or cradle 420 which can provide data interface, power and charging 
functions as well as providing a convenient reading support for the reader 1 1 5. 

Next referring to Figure 5, the schematic block diagram of the reader 
1 1 5 may be better appreciated. The reader comprises a CPU 500 and may for 
example be a Sharp LH77790 device, which includes an ARM-7 CPU core as 
well as 2K cache, 2K general purpose RAM, three UARTs, an LCD panel 
controller, three counter-timers, three PWMs, an interrupt controller, a memory 
controller for external DRAM and or other memory such as SRAM or PROMs, 
and a 24-bit parallel port. A clock crystal 505 provides a clock signal of a 
suitable frequency, for example on the order of 16.5888 MHz. Input to the 
reader 1 1 5 can be provided through an IrDA transceiver 51 0, a serial port 51 5 
connected through a base, unit 520 and an RS232 transceiver 525, a touch 
screen 530 and buttons 41 0 including "NextPage" button 535. Analytical input 
and output may be had through debug connector 540, which connects to one 
of the UARTs in the CPU 500. The touchscreen 530 will typically interface to 
the CPU 500 through a touchscreen interface 545. 

A variety of devices may be connected to the parallel port of the CPU 
500, including a real-time clock 550, FLASH RAM 555, and an option 
connection 560 (which may also connect to an Interrupt Request line INT4 of 
the CPU 500. Likewise, a variety of devices may be connected to the system 
bus 565 of the CPU 500, including EPROM 570, DRAM 575, A-Bus Control 
30 Port 580 and Option Connector 560. The system bus 565 may also provide 
output to a Misc. Control Port 585, which in turn provides data to the 
touchscreen interface 545 and power supply/voltage sensor block 590. Output 
from the CPU, including text display of the files or books, can be displayed on 
LCD panel 600, which may cooperate with a backlight 605. Conventional 
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